Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/XwDWG1m08wzTZG9ysqGBr1Qkc50.roa
File: XwDWG1m08wzTZG9ysqGBr1Qkc50.roa (raw, json)
Hash identifier: zfKSMolL0kO7MbPB0/8ZTJ42+hM10DI0DhFmog//r+w=
Subject key identifier: 5F:00:D6:1B:59:B4:F3:0C:D3:64:6F:72:B2:A1:81:AF:54:24:73:9D
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 0101035C
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/XwDWG1m08wzTZG9ysqGBr1Qkc50.roa
Signing time: Sat 01 Jan 2022 13:01:02 +0000
ROA not before: Sat 01 Jan 2022 13:01:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396356
IP address blocks: 45.132.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16843612 (0x101035c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 13:01:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f00d61b59b4f30cd3646f72b2a181af5424739d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:21:00:c2:44:10:37:ad:b0:8b:da:10:48:
ec:82:d0:63:cb:36:e0:b9:0b:96:c8:1a:90:d6:40:
a3:fd:0d:61:1d:fb:2f:50:7c:a0:d9:b6:59:76:6c:
0f:2c:a4:da:26:17:3d:78:ce:a6:55:03:69:f7:df:
3a:96:52:b9:6b:ca:d2:39:02:cc:3c:40:12:55:62:
80:99:ef:48:31:8b:0d:f6:58:fd:ff:e4:98:5c:c1:
ae:19:71:bc:e7:05:fa:bf:88:6d:86:a8:08:e0:b3:
3d:7e:b6:30:bc:e2:aa:d1:4e:1e:ed:e9:ba:0e:d5:
94:de:c9:4e:b6:02:f9:f5:57:d4:94:44:ec:5d:be:
6b:cc:61:4b:da:47:50:54:62:8e:a6:c9:14:e1:c0:
4e:cd:45:75:ea:ee:76:e0:97:2f:a4:f6:a8:ee:30:
73:38:e6:2d:b9:72:73:18:8b:24:ec:8f:fd:e3:f9:
09:70:d3:8a:4e:c4:4d:1b:55:97:d1:3c:0a:d4:49:
af:47:2d:63:5d:49:8e:80:8e:78:1a:9d:0b:a9:36:
f0:bd:4b:33:6d:69:38:32:a7:b1:0f:48:f8:22:31:
b1:d7:36:61:b4:5e:f2:2f:61:aa:6a:8f:e0:68:4d:
f3:86:89:a0:94:d4:34:b0:fb:d4:f6:8b:c2:c8:f4:
08:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:00:D6:1B:59:B4:F3:0C:D3:64:6F:72:B2:A1:81:AF:54:24:73:9D
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/XwDWG1m08wzTZG9ysqGBr1Qkc50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.115.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b7:54:06:57:20:e7:9c:ff:a5:3a:99:b7:72:28:b8:3a:55:
8e:6f:f7:17:0d:0b:cc:10:6d:d2:f3:c6:8e:e9:36:eb:b6:b0:
7d:00:10:c5:6b:12:66:09:83:76:d5:7a:0e:c0:59:13:bd:52:
9b:6c:4b:82:66:52:ae:b4:c8:fe:b3:9e:35:53:42:7b:fe:6b:
03:e7:ce:72:9f:a2:25:fd:ed:1e:60:fb:2f:89:b9:74:3d:91:
d8:82:17:2c:b5:e0:67:a6:8a:aa:c2:d8:5f:76:04:48:88:dc:
41:b4:cd:f7:cc:e5:cf:e7:2d:1e:90:72:6a:82:a8:8f:3b:ae:
a0:6e:37:9b:6c:7b:63:ff:cb:11:e2:14:f2:37:0e:eb:1c:29:
b9:05:3e:73:be:6e:7e:06:26:fa:7a:41:7e:a2:a9:f5:b6:dc:
b8:ec:9f:17:3e:d8:74:91:b4:ab:3e:bc:e3:64:24:35:fd:01:
3a:fa:e9:fe:36:53:93:8e:1b:86:69:7f:cc:96:3a:a1:c5:ed:
96:ae:47:01:47:ac:a3:3e:96:e7:62:d0:c3:f2:9c:5f:7a:79:
c5:27:0f:d0:92:d9:0f:1a:f7:6c:7d:8b:60:d9:9f:de:38:23:
2b:b4:4d:4b:69:c4:76:a3:46:ff:1d:e6:98:20:11:75:80:0e:
24:43:9b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:17 2023 by rpki-client on console-fra.rpki-client.org